N Able N Central
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in N Able N Central.
Known Exploited N Able N Central Vulnerabilities
The following N Able N Central vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability |
N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass. CVE-2026-18556 |
August 4, 2026 |
| N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability |
N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556. CVE-2026-18577 |
August 3, 2026 |
| N-able N-Central Command Injection Vulnerability |
N-able N-Central contains a command injection vulnerability via improper sanitization of user input. CVE-2025-8876 Exploit Probability: 3.1% |
August 13, 2025 |
| N-able N-Central Insecure Deserialization Vulnerability |
N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution. CVE-2025-8875 Exploit Probability: 1.6% |
August 13, 2025 |
By the Year
In 2026 there have been 2 vulnerabilities in N Able N Central with an average score of 8.2 out of ten. Last year, in 2025 N Central had 7 security vulnerabilities published. Right now, N Central is on track to have less security vulnerabilities in 2026 than it did last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 1.20.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 8.20 |
| 2025 | 7 | 7.00 |
| 2024 | 3 | 9.80 |
| 2023 | 1 | 7.00 |
It may take a day or so for new N Central vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent N Able N Central Security Vulnerabilities
Auth Bypass Acct Takeover in N-central 02026.3
CVE-2026-18577
8.2 - High
- August 02, 2026
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
Authentication Bypass Using an Alternate Path or Channel
Auth Bypass via Alt Path in N-central (2026.1)
CVE-2026-18556
8.2 - High
- August 01, 2026
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
Authentication Bypass Using an Alternate Path or Channel
RCE via Deserialization in N-central Software Probe <2025.4
CVE-2025-11367
- November 12, 2025
The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
Marshaling, Unmarshaling
N-central <2025.4 Auth Bypass via Path Trvser (CVE-2025-11366)
CVE-2025-11366
- November 12, 2025
N-central < 2025.4 is vulnerable to authentication bypass via path traversal
Directory traversal
N-central <2025.4 XXE Info Disclosure
CVE-2025-11700
- November 12, 2025
N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
XXE
Unauth SessionID Generation in N-central < 2025.4
CVE-2025-9316
- November 12, 2025
N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.
Improper Validation of Specified Quantity in Input
N-Central Windows Agent/Probe Privilege Escalation via File Permission
CVE-2025-10231
7 - High
- September 10, 2025
An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.
Incorrect Default Permissions
N-able N-central OS Command Injection before 2025.3.1
CVE-2025-8876
- August 14, 2025
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
Improper Input Validation
Deserialization of Untrusted Data in N-able N-central <2025.3.1 Leads to LCE
CVE-2025-8875
- August 14, 2025
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
Marshaling, Unmarshaling
N-central (pre-2024.2) UI Auth Bypass
CVE-2024-28200
9.8 - Critical
- July 01, 2024
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.
authentification
N-central Server Session Rebinding in Entra SSO (before 2024.3)
CVE-2024-5322
- July 01, 2024
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.
N-able N-central: PrivEsc via API calls before 2023.6
CVE-2023-47132
9.8 - Critical
- February 08, 2024
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.
Local Code Exec via Monitoring in N-central (pre-2023.4)
CVE-2023-30297
7 - High
- August 04, 2023
An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for N Able N Central or by N Able? Click the Watch button to subscribe.
